Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
added 2026/06/15 9:30 p.m.6 views

YouTransfer has an issue in the sendmail transport integration that allows arbitrary code execution

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...

9.8CVSS5.8AI score0.00476EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/06/15 9:30 p.m.8 views

GHSA-68MC-H6H8-79WJ YouTransfer has an issue in the sendmail transport integration that allows arbitrary code execution

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...

9.8CVSS6AI score0.00476EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/15 9:30 p.m.19 views

EUVD-2026-36778

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...

5.8AI score0.00476EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/15 8:20 p.m.11 views

Arbitrary Code Injection

Overview youtransfer is a self-hosted file transfer solution. Affected versions of this package are vulnerable to Arbitrary Code Injection through the sendmail transport integration component. An attacker can execute arbitrary code by supplying a specially crafted request. Remediation There is no...

9.8CVSS6.3AI score0.00476EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/15 8:16 p.m.24 views

CVE-2026-50880

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...

9.8CVSS0.00476EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/15 12:00 a.m.11 views

CVE-2026-50880

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...

5.8AI score0.00476EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/15 12:00 a.m.22 views

PT-2026-49321

Name of the Vulnerable Software and Affected Versions YouTransfer version 1.0.6 Description An issue in the sendmail transport integration component allows attackers to execute arbitrary code by supplying a crafted request. Recommendations At the moment, there is no information about a newer...

9.8CVSS6.2AI score0.00476EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/15 12:00 a.m.34 views

CVE-2026-50880

CVE-2026-50880 affects YouTransfer v1.0.6, specifically the sendmail transport integration component. The issue allows an attacker to execute arbitrary code by sending a crafted request. The cybersecurity metadata indicates a critical impact (CVSS 3.1: 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). C...

9.8CVSS5.9AI score0.00476EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/15 12:00 a.m.40 views

CVE-2026-50880

An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request...

0.00476EPSS
SaveExploits0References1
Rows per page
Query Builder